5 A COMMUNICATIONS SYSTEM 

gAC/OSRm/vn OF Hid TNVBi^TlO^ 

The present invention relates to a communications system and in 
particular, but not exclusively, to one having two domains or 
segments . ^ . i \ \ I 

10 l^SdWpf.'i^tn flie l^eL-kJ Art 

Known office based communication systems usually operate with 
fixed line telephone units within the office linked via an 
internal switch board or PBX (private branch exchange) . Such 
fixed line systems are able to provide relatively high voice 
15 quality although users are not able to move for the duration of 
a call. 

The advent of wireless cellular telecommunication technologies, 
\v\ an example of which is the GSM standard (Global System for Mobile 

^20 communications) means that wireless systems can provide at least 

the equivalent voice quality as compared to fixed line systems. 
C Wireless cellular systems also have the advantage that the user 

1-^ can move . 

'.^5 WIO "wireless intranet office" is a proprietary communication 
n system which is being developed by the present applicants. This 

P WIO system introduces the concept of utilizing mobile terminals, 

such as conventional GSM mobile stations, in an office 
environment. The system makes use of a known concept called 
30 internet telephony or voice-over- IP . (IP stands for internet 
protocol . ) 

Voice-over- IP allows audio, video and data information to be 
transmitted over the existing IP-based local or wide area 
35 networks or the Internet . The technology thus provides for 
convergence and integration of the communication of three 
different data types over the same network. 

Prior to the introduction of voice-over- IP, offices often 
40 operated three separate networks for the transmission of audio, 
video and data information. Fixed line telephone systems coupled 



to an in-house PBX provided voice communication. An office based 
local area network (LiAN) or intranet (i.e. a packet switched 
internal network) having computer terminals linked via network 
cards and under the control of a server station provided for the 
transmission of "conventional" computer data. Video cameras 
linked to monitors via a fixed line or wireless link provided for 
video communications. With voice-over-IP, audio, video and data 
information can be transmitted simultaneously using the same 
packet-switched network or IP-router throughout the office 
environment and beyond the confines of the office. 

In order to provide for such media convergence, voice-over- IP 
often uses a specific ITU (International Telecommunication Union) 
standard protocol to control the information flow over the 
intranet. One common standard protocol used in voice-over- IP 
systems, and the one used in the WIO system is termed H.323. 
H.3 23 is an ITU standard for multimedia communications (for 
example voice, video and data) and allows multimedia streaming 
over .conventional packet-switched networks. The protocol provides 
for call control, multi media management and bandwidth management 
for both point-to-point (two end users in communication) and 
multipoint (three or more end users in communication) 
conferences . 

The H.3 23 protocol is network, platform and application 
independent allowing any H.3 23 compliant terminal to operate in 
conjunction with any other H.323 terminal. 

The H.3 23 standard defines the use of three further command and 
control protocols. H.245 is for call control and is responsible 
for control messages governing the operation of the H.323 
terminal including capability exchanges, commands and 
indications. Q.931 is for call signalling and is used to set up 
a connection between two terminals. The RAS (Registrations, 
Admissions and Status) signalling function governs registration, 
admission and bandwidth functions between endpoints and 
gatekeepers. Gatekeepers will be discussed in more detail 
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5 hereinafter. 

For a H.323 based communication system, the standard defines four 
major components: terminals; gateways; gatekeepers; and 
multipoint control units (MCU) . 

10 

Terminals are the user end-points on the network and can be a 
fixed telephone, a fax unit or a computer terminal. All H.323 
compliant terminals must support voice communications and 
optionally video and data communications. 

15 

Gateways connect H.323 networks to other networks or protocols. 
C3 For an entirely internal communications network, i.e. one with 

ni no external call facility, gateways are not required. 

.40 Gatekeepers are the control centers of the voice -over- IP network. 

^ It is under the control of a gatekeeper that most transactions 

(communication between two terminals) are established. The 
primary functions of the gatekeeper are bandwidth management call 
control controlling the number of simultaneous H.3 23 connections 

jSS and controlling the amount of bandwidth these calls consume. An 

CI H,323 "zone" is defined as a collection of all terminals, 

gateways and multipoint -control units (MCU) which are managed by 
a single gatekeeper. Multipoint control units (MCU) support 
communications between three or more terminals. The MCU comprises 
30 a multipoint controller (MC) which performs H.245 negotiations 
between all terminals to determine common audio and video 
processing capabilities, and a multipoint processor (MP) which 
routes audio, video and data streams between terminals. 

35 The conventional voice-over- IP system described hereinbefore 
normally utilizes standard fixed- line telephone systems which are 
subject to the disadvantages of a lack of mobility. 

The WIO concept takes voice-over- IP further in that it provides 
40 for the use of conventional mobile terminals, such as GSM mobile 
stations, within the voice-over- IP system. To provide for such 
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5 mobile communications within an intra-office communication 
network, the WIO system combines known voice-over- IP with the use 
of conventional wireless terminals within the voice-over- IP 
system. Those telephone units may be GSM mobile stations. This 
WIO concept may be in the context of a intra-office communication 
10 network. 

Thus, in the WIO system intra-office calls to mobile stations are 
routed through the office intranet and external office calls are 
routed conventionally through the GSM network. Such a system 
15 provides most or all of the features supported by the mobile 
station and the GSM network such as telephone directories, short 
C3 messaging, multiparty services, data calls, call barring, call 

fif forwarding etc. WIO thus provides for integrated voice, video and 

U1 data communications by interfacing an H.323 based voice-over- IP 

"J50 network with a GSM mobile network, 

^ The WIO system is a cellular network similar to the conventional 

f;3 GSM network and is divided into H.323 zones as discussed 

4p hereinbefore. One H.3 23 zone may comprise a number of a GSM cell. 

jS5 Two or more H.323 zones may be contained with an administrative 
P domain. 

Security problems can arise between the office and operator 
domains of the network. The operator domains of the network are 
30 those which are administered by an operator and will typically 
include the mobile 'communication supporting components.. The 
office domain typically includes the office intranet and is 
maintained by the corporation. 

35 It has been recognised by the inventors that H.323 traffic would 
be rejected by network protection measures, thus preventing cross 
domain calls to take place. 

A second problem with the proposed WIO system arises when there 
40 is a call between a fixed H.323 terminal and a mobile station. 

Currently, if a mobile station moves from being supported by one 
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5 network element to being supported by another network element, 
difficulties can arise. In particular, the fixed terminal would 
need to break its connection with the network element which 
previously supported the mobile station and establish a new 
connection with the network element which now supports the mobile 
10 station. This is a cumbersome process and data can be lost 
unnecessarily . 
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Accordingly, it is an aim of embodiments of the present invention 
to address these problems. 



According to one aspect of the present invention, there is 
provided a communications system comprising a first part and a 
second part, the first and second parts being connected so that 
j'l a first user in one of the first and second parts can communicate 

|;f20 with a second user in the other of the first and second parts, 
O wherein at least said first user is able to move within the 

IS respective part of said system, said system further comprising 

a gateway for permitting communications between said first and 
F second parts, said gateway comprising a register for storing 

z25 information associating the said first and second users and for 
□ Storing information relating to the current location of the first 

■■^^ user so that information from the second user can be directed to 

first user. 

30 The gateway thus stores information relating to the current 
location of the first user. Accordingly, even if the first user 
is moving, the connection between the second user and the first 
user can be fixed for the duration of a call and handoff of the 
first user does not need to be considered by the second user. In 

35 preferred embodiments of the present invention, the second user 
is stationary. 



When the location of the first user changes, preferably 
information relating to the new location is stored in the 
40 register of the gateway. Thus, information from the second user 
can be directed by the gateway to the new location of the first 
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5 user and vice versa. 

The first user may be a mobile terminal which is in communication 
with a base station. The base station may be coupled to a 
respective network element and the identity of the network 
10 element may be stored in the register as the current location 
information of the first user. The functions of the base station 
and the network element may be provided by a single element . In 
other words, the gateway may direct information from the second 
user to the network element associated with the first user. The 
15 network element may then forward the information from the gateway 
element to the first user. The network element may be arranged 
O to process the information received from the second user via the 

lii gateway so as to be in a format suitable for the first user. 

y20 Preferably, an identifier allocated in the network element which 
^ is arranged to receive communications intended for the first user 

is stored in the register. By identifying the port of the 
ri respective network element, the first user may be effectively 

identified as that first user will be exclusively associated with 
j525 that port . 

A gatekeeper element in said first part may be arranged to 
control the updating of the register and the handover of the 
first user between base stations and their respective network 

30 elements. The gatekeeper element may be defined by the second 
user as the initial destination during call set-up and the 
gatekeeper may poll the plurality of network elements in order 
to determine the location of the first user. The gateway may be 
transparent during call set-up procedure. In other words, the 

35 gateway does not alter the information from the second user as 
it passes to the gatekeeper. Preferably, after call set-up, 
information is forwarded directly from the gateway to the 
2-espective network element. In other words, information from the 
gateway is not directed to the respective network element via the 

40 gatekeeper . 



Preferably, the gateway is arranged to check the source and 
destination of all information sent between the first and second 
users in the first and second parts and to permit the information 
to be passed through said gateway if the source and destination 
information matches the information stored in the register. The 
source is of course one of the second and first users and the 
destination is the other of the first and second users. 

The second user may operate' in accordance with the H,3 23 protocol 
whilst the first user may operate in accordance with the GSM 
standard or any suitable cellular telecommunications standard. 

Preferably, the second user includes information as to the 
identity of the first user but not the location thereof in 
information sent to the gateway and said gateway adds the 
location of the first user from said register to said information 
from the second user. 

According to a second aspect of the present invention, there is 
provided a gateway for use in a communications system comprising 
a first part and a second part, the first and second parts being 
connected so that a first user in one of the first and second 
parts can communicate with a second user in the other of the 
first and second parts, wherein at least said first user is able 
to move within the respective part of said system, said gateway 
being arranged in use between said first and second parts, said 
gateway comprising a register for storing information on the 
identity of said first and second users and for storing 
information relating to the current location of the first user 
so that information from the second user can be directed to first 
user . 

According to a third aspect of the present invention, there is 
provided a communications system comprising a first part and a 
second part, the first and second parts being connected so that 
a first user in one of the first and second parts can communicate 
with a second user in the other of the first and second parts. 
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5 said system further comprising a gateway element between said 
first and second parts ^ said gateway comprising a register for 
storing information on the identity of said first and second 
users, wherein said gateway is arranged to check the source and 
destination of all information sent between the first and second 
10 users in said first and second parts and to permit the 
information to be passed through said gateway if the source and 
destination information matches the information stored in said 

register. gRlEFD^SdRlPT/D/V/ OF THE MAW lfV5S 
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15 For a better understanding of the present invention and as to how 
the same may be carried into ef feet reference will now be made 
by way of example only to the accompanying drawings in which: 

y] Figure 1 shows a block diagram showing the components used in the 

.^^0 implementation of the WIO system proposed by the applicant; 

^ Figure 2 is a block diagram showing an embodiment of the present 

'^^ invention; and 

□ Figure 3 shows in detail possible arrangements for the mobility 

S"! and media gateway and firewall arrangement of Figure 2 . 

£3 In the office environment, denoted by the dashed box 100 in 

Figure 1, within which the WIO system is implemented, there is 
an IP (internet protocol) based LAN 10 operable to carry packet 
form data. 

30 

One or more mobile stations (MS) 1 communicate, i.e. transmit 
signals to and/or receive signals from, a base transceiver 
station (BTS) 2 . . The base transceiver station 2 used in the WIO 
system is similar to the base transceiver stations used in 

35 conventional GSM cellular communication systems in that the base 
station 2 is connected to, and operates in conjunction with, a 
controller. In a conventional GSM system, the controller is 
termed a base station controller (BSC) . However, in the WIO 
system, the controller is represented by a GSM radio gateway 3, 

40 the function of which will be described hereinafter. The * base 
transceiver station 2 therefore receives signals transmitted by 
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5 the mobile station 1 and forwards them to the GSM radio gateway 
3. The GSM radio gateway 3 is also connected to the LAN 10. 

A WIO gatekeeper (WGK) 4 is connected to the LAN 10 as is an 
H.323 terminal 5. The H.323 terminal 5 may be represented by a 
10 computer terminal which may support voice communication. 

Connected to the LAN is a GSM gateway 8 , The GSM gateway 8 is 
also connected to a standard GSM network 4 0 as used in a 
conventional mobile communication system. The network is 
15 sometimes referred to as a public land network. The WIO system 
allows for the use of mobile telephones in tKe office environment 
to make both internal and external office calls. The functions 

m of each of the components of Figure 1 will now be described in 

^\ more detail. 

|o 

^ The GSM radio gateway 3 performs similar functions to that of a 

base station controller in a conventional GSM network such as the 
C3 management of radio resources and channel configuration and the 

2" handling of the base transceiver station configuration. However, 

MS the GSM radio gateway 3 also provides conversion from GSM voice 
y data to packet based data suitable for transmitting on the packet 

based LAN 10 . 

The WIO gatekeeper 4 is the main controller of the WIO system. 

30 It is responsible for all of the functions which the H.323 
protocol defines to its gatekeeper, including call management, 
call signalling. It is also responsible for mobility management. 
The WIO gatekeeper 4 is able to manage the main different call 
types such as voice, data, facsimile and conference calls which 

35 can be established between a mobile station, a PC terminal and 
a normal telephone in any combination. 

The GSM gateway 8 handles communication between the WIO 
environment and the mobile services switching center (MSC) of the 
40 GSM network. From the MSC viewpoint, the WIO appears to be a 
conventional base station subsystem. The A-intranet gateway 8 
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also provides isolation means for disconnecting the WIO system 
from the MSG in the event of WIO system failure. 

The telephone calls managed by the WIO system can be divided into 
internal calls and external calls. Internal calls for those calls 
where both parties involved in the call are located within the 
WIO system and external calls involve a user who is not located 
within the WIO system. 

Reference will now be made to Figure 2 which illustrates an 
embodiment of the present invention. The office environment 100 
illustrated in Figure 1 may be more complex and be as shown in 
Figure 2 . The office environment may therefore be divided into 
two segments or domains. The operator segment 40 is administered 
by the network operator and can include the mobile communication 
functions . 

In the embodiment shown in Figure 2, the operator segment 4 0 has 
two base stations 42 and 44. Each of these base stations 42 and 
44 has its own cell and is able to communicate with the mobile 
station 46 when the mobile station 46 is in the cell associated 
with the respective base transceiver station 42 or 44. In 
practice, more than one mobile station will be present in the 
operator segment 40. Each of the base transceiver stations 42 and 
44 is connected to a respective GSM radio gateway 48 and 50 
respectively. The connection between the base transceiver station 
42 or 44 and its associated GSM radio gateway 48 or 50 may be via 
a wired or a wireless connection. Each of the GSM radio gateways 
48 and 50 are connected to a LAN 52, 

Also connected to the LAN 52 is a gatekeeper 54. The base 
transceiver stations 42 and 44, GSM radio gateway 48 and 50 and 
the gatekeeper 54 all provide the same function as those 
components described in relation to Figure 1 . 

The office segment 42 comprises first and second H.323 terminals 
56 and 58 respectively. Both of the H.323 terminals can take any 
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5 suitable form and may, for example, be computer terminals with 
voice-over-IP capabilities. The H.323 terminals 56 and 58 are 
connected to a second LAiST 60. The second H.323 terminal 58 is 
coupled to a private branch exchange 62 which may, as in the 
arrangement shown in Figure 2, be connected to an external public 
10 service telephone network. In the embodiment shown in Figure 2, 
either or both of the LANs 52 and 60 will be connected to an 
external internet . 

Xhe embodiment shown in Figure 2 is arranged to deal with two 
15 problems. Firstly, the embodiment shown in Figure 2 seeks to 

provide a secure connection between the two segments to avoid 

undesired access from one segment to another. Secondly, the 
m terminals 56 and 58 in the office segment shown in Figure 2 are 

fixed terminals whilst the terminals in the operator segment 40 
uftO are mobile stations 46. In particular, the embodiment shown in 
y[j Figure 2 aims to deal with the situation which occurs when the 

r mobile station 46 moves from the cell associated with one base 

P transceiver station 42 to the cell of the base transceiver 

^ station 44 which is associated with a different intranet mobile 

i25 cluster interface 50. 

Both of these aims are dealt with by the provision of a MMGW 
mobility and media gateway and firewall arrangement 64 . This is 
shown in more detail in Figure 3 . 

30 

Embodiments of the present invention use the IP protocol which 
works on the basis of addresses and port information which- 
together define a destination. 

35 A "packet filter" type firewall looks at from who (port 
information) and from where (address information) a packet is 
sent as well as to whom and where the packet is sent. In other 
words, it looks for four pieces of information in each data 
packet; source address, source port, destination address and 

40 destination port. Only packets associated with previously defined 
source and destination addresses and port information are allowed 
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5 through the firewall. 

Application-level proxy firewalls are one which are aware of the 
application. In this case, this would mean that a firewall knows 
about WIO and how WIO works. The necessary information is 
10 inferred directly from the call set up signalling. Application 
proxy firewalls read, interpret and modify the content of 
signalling messages. 

Firewalls are effectively invisible to other network elements. 
15 Packets pass through the firewalls, but they are never addressed 

to a firewall. In other words, firewalls observe traffic that is 

passing between other network elements and lets some packets pass 
In whilst removing others. Either of these two firewalls as well as 

any other suitable firewall can be used in embodiments of the 
:|20 present invention. 

J"" In the present embodiment, packets are explicitly addressed to 

C? the media and mobility gateway. The media and mobility gateway 

ff; will receive the packets, check them, convert the address 

JS5 information and retransmit the packets. 

For the media and mobility gateway to operate properly, packets 
must be addressed to it. As the network has two segments, this 
means that the mobility and media gateway may have a dual entity. 
30 It may have one address that is visible to the first segment and 
another that is visible to the second segment. These addresses 
may be the same. 

Figure 3 shows various different ways in which the firewall and 
35 mobility and media gateway arrangement can be implemented in 
practice . 

Figure 3a shows the second segment 4 2 being protected by using 
a firewall 80 and a single mobility and media gateway 82 in the 
40 second segment. In this case, the media and mobility gateway 82 
is part of the second segment and has a single identity. The 
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5 firewall 80, which is also part of the second segment is 
configured to pass traffic to and receive traffic from the 
mobility and media gateway 82/ It should be appreciated that the 
data to be sent to the first segment 4 0 from the second segment 
42 must pass through the firewall 80 first. 

10 

Figure 3b shows a second arrangement. In this arrangement, the 
firewall 80 and the mobility and media gateway 82 of the first 
arrangement are provided. Additionally, a second firewall 84 is 
provided in the first segment 40. Both firewalls 80 and 84 are 
15 configured to pass data to and receive data from the mobile and 
media gateway 82. 

A third arrangement is shown in Figure 3c. A firewall 84 is 
^] provided in the first segment 40 whilst the mobility and media 

ygO gateway 82 is provided in the second segment 42. There is no 
^ firewall in the second segment 42. The firewall 84 is again 

configured to pass all data to and from the mobility and media 
C3 gateway 52 . 

- 

425 In the fourth arrangement, no firewall is used. The mobility and 
media gateway 82 is only provided in the second segment 4 2 . The 
fifth arrangement shown in Figure 3e is similar to that shown in 
Figure 3d. However, the mobility and media gateway 82 is instead 
only provided in the first segment 40. 

30 

In the sixth arrangement, which is used in preferred embodiments 
of the present invention, the mobility and media gateway 82 is 
effectively provided in each of the segments 40 and 42. It will 
therefore have a dual identity, one for each segment. Since the 

35 mobility and media gateway 82 has a dual identity, it belongs to 
both of the segments and hence no intersegment traffic occurs. 
Rather, the mobility and media gateway 82 tunnels the data 
between the segments. The use of a firewall can be dispensed 
with. The mobility and media gateway 82 can be configured in any 

40 suitable manner so that the mobility and media gateway 82 is 
trusted entity by both segments 40 and 42. In other words, the 

i4 
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function of the firewalls can be provided by the mobility and 
media gateway 82. 

The call set up procedure will now be described. It is assumed 
that one of the H.323 terminals 56 and 58 is calling a mobile 
station 46 in the first segment 40. It is assumed that the sixth 
arrangement shown in Figure 3f is present. The mobility and media 
gateway 8 2 has a dual identity where address 1 is the mobility 
media gateway identity in the first segment and address 2 is the 
identity of the mobility media gateway 82 in the second segment 
42. The H.323 terminal 56 sends the call set up message to the 
gatekeeper 54. If there ^ are firewalls present, they can be 
configured to pass this message through, as the gatekeeper's port 
number for call signalling is well known to the firewall. 

The gatekeeper 54 receives a set up message and notes that the 
requested destination is a mobile station 46 and that it 
therefore needs to be polled. The gatekeeper 54 then commences 
a paging procedure. Whilst paging is carried out, the gatekeeper 
54 requests that the mobility and media gateway 82 reserve a port 
number. The mobility and media gateway 82 selects a port number 
and replies to the gatekeeper 54. The paging ends with the GSM 
radio gateway 48 currently serving the mobile station 46 sending 
a paging response message. The gatekeeper 54 knows the gateway 
address that serves the mobile station 46 from this message. The 
gatekeeper 54 will thus know where to send the call set up 
information. It will include in the call set up information the 
port and address information of the mobility and media gateway 
82 which has been reserved. This is in order to instruct the GSM 
radio gateway 48 to direct the call data flow correctly. 

The GSM radio gateway 4 8 receives the call set up message and 
will reserve a port number for this call. The GSM radio gateway 
48 confirms the call by sending a message to the gatekeeper 54 
detailing the port number it has selected. 

The gatekeeper 54 now needs to create an association with the 
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5 mobility and media gateway 82. One port has been already reserved 
which is intended to receive data from the mobile station sent 
by the GSM radio gateway 48. It also needs to tell the mobility 
and media gateway 82 where the mobility and media gateway is to 
send data which has been received from the H.323 terminal 56. 

10 Finally, the gatekeeper 54 also needs to provide an indication 
for the mobility and media gateway 82 to realise that the 
information is related to a single call. In other words, an 
association is created between the call, the information and 
resources (source and destination addresses and port numbers) 

15 reserved for the call. It therefore sends a configuration message 
to the media and mobility gateway that includes: 



source and destination addresses and ports in order to 
associate them together and in order to advise the mobility 
and media gateway 82 about the destination information; and 
the already reserved port information so that the mobility 
and media gateway 82 can relate this new information with 
the previously allocated resources. 

'Us The mobility and media gateway 82 creates the association by 
□ storing the information in its register. It will now select a 

free port on the H.323 terminal side. ^ 

The mobility and media gateway 82 responds to the gatekeeper 54 
30 with the newly allocated port number. The gatekeeper sends a call 
confirmation message' towards the H.323 terminal including the 
mobility and media gateway address and port number in that 
segment. This is in order to tell the H.323 terminal where to 
send the data . 

35 

The call can now be commenced. The processing of the speech 
packets will now be described. The H.323 terminal 56 has speech 
data which it wishes to send to the mobile station 46. It sends 
the speech data to the mobility and media gateway address and 
40 port it is received as part of the call set up procedure. As the 
mobility and media gateway receives the data, it will check that 
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5 the source address and port match the port where the data was 
received. If so, the mobility and media gateway 82 will forward 
the data towards the GSM radio gateway 4 8 that serves the mobile 
station, using the data it receives during call set up. 

10 The GSM radio gateway 4 8 in turn has some data which it wishes 
to send to the H.323 terminal from the mobile station. It will 
transmit the data to the mobility and media gateway 82 using the 
identity of the mobility and media gateway that is visible to it. 
The mobility and media gateway will again check the information. 

15 If the data on the receiving port matches the expected sender, 
it will forward the data to the H.323 terminal. Otherwise, the 
data will be discarded. 

J If the mobile station moves from the cell associated with one of 

]20 the base stations 42 to the cell associated with another of the 
f base stations 44, handoff will be required. The GSM radio gateway 

4 8 currently serving the mobile station will decide when handoff 
5 is required. It will then inform the gatekeeper 54. The 

] gatekeeper 54 sends a handoff request to the new GSM radio 

;25 gateway 50. The target GSM radio gateway selects the port that 
it will use to receive the speech data. This information is 
forwarded to the gatekeeper, handoff is then executed. Once an 
indication of successful handoff is received, the existing 
association in the mobility and media gateway 82 is updated with 
30 the new information. 

The mobility and media gateway may process call signalling 
particularly if it is configured as shown in Figure 3f . Consider 
the following situation. 

35 

A H.323 terminal 56 must use the RAS (registration, admission and 
status) signalling prior to sending a call setup request in order 
to get admission from the gatekeeper 54 to use the network. With 
the admission request, the H.323 terminal 56 sends its own port 
40 number where it wishes to receive the signalling messages. The 
message is sent towards the well known port of the mobility and 
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5 media gateway 82, which will relay the message to the gatekeeper 
54 . 

The mobility and media gateway 82 receives the message at its 
well known port. It will read and store the port information of 
10 the H.323 terminal 56 and replace the information with its own 
data, and forward the data towards the gatekeeper 54, The 
gatekeeper 54 receives the message, and selects a port, and 
replies to the message. 

15 The mobility and media gateway 82 will again store the 
gatekeeper's port number, allocate a new port number for the 
'^J H.3 23 terminal and send the message forward. Having received a 

U1 admission configuration from the gatekeeper 54, the H.3 23 

Jf: terminal 56 now sends the call setup request. 

'tj Eventually the call setup request reaches the GSM radio gateway 

J^" 48 which will also make a request for admission prior to 

accepting the call set-up request. This time, the mobility and 
S"i media gateway 82 is not involved and the allocation of ports is 

J25 more straightforward. 

Another way of carrying out this function would be to bundle 
these transactions into the call setup messages. 

30 If a firewall is included such as shown in Figures 3a to 3c, and 
the mobility and media gateway 68 does process signalling as 
well, then the allocation of speech ports can be modified to be 
more straightforward. This is described hereinafter. 

35 The H.323 terminal 56 sends the call setup request towards the 
mobility and media gateway 82, which "acts" like the gatekeeper 
54 . 

The mobility and media gateway 82 will read the pprt information 
40 and replace it with it's own information. The read data is stored 
in the register in the mobility and media gateway 82. The 
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mobility and media gateway 82 forwards the data towards the 
gatekeeper 54 . 

The gatekeeper does the normal polling (or paging) to find the 
mobile station 46. Once the mobile station 46 has been found, the 
gatekeeper 54 forwards the setup message towards the GSM radio 
gateway 48 . 

When the call is confirmed, the GSM radio gateway 4 8 sends the 
message through the gatekeeper 54 to the mobility and media 
gateway 82, The gatekeeper 54 uses the mobility and media gateway 
port information it received in the setup message when forwarding 
the message to the mobility and media gateway 82 . 

The mobility and media gateway will read the GSM radio gateway 
port information from the confirmation message and storage it in 
its register. The mobility and media gateway 82 will allocate a 
new port information for the speech stream that is coming from 
the H.323 terminal 56, Then the mobility and media gateway 82 
replaces the port information and forwards the confirmation 
message towards the H.323 terminal 56. 

When the terminal receives the confirmation .message, it will 
learn the port number where it will send the data as described 
hereinbefore . 

The mobility and media gateway can carry out other functions. For 
example, as part of the call setup, the end points may specify 
how much bandwidth is going to be used for the transactions. The 
security of the mobility and media gateway can be enhanced by 
adding functionality that monitors the actual bandwidth used by 
the end points during the call. If it is significantly different 
from what was specified, the mobility and media gateway may close 
the call. In other words, the mobility and media gateway can use 
other data which it learns as part of the call setup procedure 
to assist in maintaining a secure system. 
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5 Whilst the embodiment of the present invention has been described 
in the context of a system which uses the GSM standard, it should 
be appreciated that any other mobile cellular system can also be 
used in embodiments with the present invention. Likewise, the 
system has been described as using the H.323 protocol and the 
10 associated protocols. However, any other suitable protocol can 
of course also be used in embodiments of the present invention. 
It should also be appreciated that in embodiments of the present 
invention, both users in the two different segments may be mobile 
users . 
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